Wednesday May 11, 2011
Open Book:
Facebook Apps Expose User Data
Many Facebook applications have a flaw that exposes private user data to the application provider.
The flaw has existed for several years and potentially affects tens of thousands of users.
The flaw, which the researchers estimate has affected hundreds of thousands of applications, exposed user access tokens to advertisers and others. The tokens serve as a spare set of keys that Facebook apps use to perform certain actions on behalf of the user, such as posting messages to a Facebook wall or sending RSVP replies to invitations. For years, many apps that rely on an older form of user authentication turned over these keys to third parties, giving them the ability to access information users specifically designated as off limits.
Posted in: Net by bubblejam at 11:10 AM | Comments (0) | Email This Entry